Release Notes

• If you run a security scanner tool such as Nessus, against the Server Administrator Web server, security warnings may be displayed

against port 1311, the port running the Server Administrator Web server. The warnings have been investigated by engineering and are

determined to be "false positives" (invalid security warnings) that you can ignore. The following are the warnings:

– The Web server on 1311 allows scripts to read the sensitive conguration and/or XML les.

– The Web server on 1311 allows to delete "/" which implies that the web server will allow a remote user to delete the les in root on

the server."

– The web server on 1311 may be susceptible to a 'www Innite Request' attack.

• It is possible to make the remote thttpd server execute arbitrary code by sending a request like: GET If-Modied-Since:AAA[...]AAAA

Solution: If you are using thttpd, upgrade to version 2.0. Else, contact the vendor for a patch or change the web server. CVE on this

one is CAN-2000-0359".

• Enabling Integrated Windows Authentication in Internet Explorer is not required to activate the Single Sign-On feature.

• The Server Administrator security settings are not applicable for Active Directory users. Active Directory users with read-only login can

access Server Administrator, even if the access is blocked in the Server Administrator Preferences page.

• Dell SNMP MIB Files for Dell Systems:

• Dell SNMP MIB les for Dell systems allow you to obtain and verify information provided by supported software agents. The current

MIB les supported by PowerEdge software agents are located at \support\mib on the Systems Management Tools and

Documentation DVD.

NOTE:

A MIB-II-compliant, SNMP-supported network management station is required to compile and browse MIB

les.

OpenManage support for Encrypting File System (EFS)

• To improve security, Microsoft allows encrypting les using EFS. Note that SERVER ADMINISTRATOR will not function if its dependent

les are encrypted.

• Server Administrator GUI and CLI Response Time

• On PowerEdge 10th generation of PowerEdge servers or later, the response time for some components of the Server Administrator

GUI and CLI has increased to several seconds as Server Administrator does not cache some of the DRAC/iDRAC data. The data is

retrieved from the DRAC/iDRAC when you request for it.

Following are the Server Administrator GUI pages for which the response time may have increased:

– Server Administrator home page on log in

– Remote Access > Users

– Alert Management > Platform Events

• Following are the Server Administrator CLI commands for which the response time may have increased:

– omreport chassis remoteaccess cong=user

– omreport system platformevents

– omreport system pedestinations

The amount of time varies depending on the hardware and operating system.

Firmware for PERC controllers

PERC H730P Adapter, PERC H730P Slim, PERC H730P Mini Blades, PERC H730P Mini, PERC H730 Adapter, PERC H730 Mini Blades,

PERC H730 Mini, PERC H830 Adapter, PERC H330 Adapter, PERC H330 Mini, PERC H740P Adapter, PERC H740P Mini Monolithic,

PERC H840 Adapter, PERC S140, PERC H330 Mini Blades, PERC H330 Embedded, HBA H330 Adapter, HBA H330 Mini, FD33XD-PERC

Dual, FD33XS-PERC single and 12Gbps SAS HBA, HBA 330 MX, HBA 330 MMZ, PERC H745P MX, PERC H730P MX, FD33XD-HBA Dual,

FD33XS-HBA single.

Dell EMC OpenManage Release Notes

Version 9.2.1